Senior Security Engineer | GRC

Description

**Our Security Team:** Responsible for ensuring that innovation at Creditas happens in a resilient manner. We do not act as blockers but as strategic partners to Product and Engineering, integrating security natively and automatically (Security by Design). **Our Process** It all begins with your application, and from there we will build an incredible journey. Please note that for some roles, we conduct a technical assessment with our development team, followed by a conversation with your future manager. The duration of the process may vary depending on the opportunity, but rest assured—we commit to: * Carefully reviewing your profile; * Providing feedback at every stage; * Sending emails with all necessary information. **Diversity in Our DNA** Only differences can take us further. We do not compromise on this—it is non-negotiable. Today, women occupy more than half of our decision-making positions. Our commitment is to expand inclusion for women, Black people, people with disabilities (PCDs), and LGBTQIAPN+ individuals. **We Act Based on Three Pillars:** **Diversity:** We value plurality and respect all differences with empathy. We work to ensure that our Crew truly represents the society in which we live. **Equity:** We believe in fair pathways for everyone. Ensuring access, opportunities, and development is a duty—not an exception. **Inclusion:** We seek a safe, well-being-oriented, and belonging-focused environment. Here, everyone can be their authentic self—freely, respectfully, and proudly. If this is also your mission, Creditas could be your next step. **Responsibilities and Duties** * **Lead GRC Automation:** Transform compliance requirements into automated controls (**Compliance as Code**), eliminating manual evidence collection. * **Implement AI in Governance:** Explore and apply AI solutions to optimize processes such as risk analysis, threat mapping, and responses to security questionnaires. * **Sustain Technical Controls:** Collaborate with Engineering to ensure frameworks (ISO 27001, NIST, SOC2) are directly integrated into the CI/CD pipeline. * **Manage Risks Using Data:** Conduct risk assessments based on telemetry and real-world data, moving beyond purely subjective analyses. * **Technical Interface with Auditing:** Treat "non-conformities" as technical debt and orchestrate audits through systematic processes. **Requirements and Qualifications** * **Engineer Mindset:** Strong inclination to solve governance challenges using code, scripts, and APIs. * **AI Enthusiast:** Knowledge or willingness to apply Artificial Intelligence to accelerate team productivity. * **Cloud and Automation Experience:** Familiarity with cloud ecosystems and infrastructure automation tools. * **Framework Proficiency:** Practical experience with NIST, ISO 27001, and SOC2 from a technical perspective. * **Hybrid Work Availability:** Must attend our office in the Morumbi region of São Paulo once per month for four consecutive days, typically during the last or first week of the month (Creditas in Person). **Additional Information** **Learn About Our Benefits:** ----------------------------------- **Health and Well-being** * Health Insurance (Alice) * Dental Insurance (SulAmérica) * Wellz: 100% free therapy sessions * Wellhub: Access to gyms and studios * Creditas Endurance: Program encouraging high-impact sports * Pharmacy Benefit (Univers) * Life Insurance (Porto Seguro) * Birthday Day Off **Family and Quality of Life** * Extended Parental Leave: 6 months for pregnant individuals and 35 days for non-pregnant individuals * Family Care: Support program for maternity and paternity * Childcare Assistance * Assistance for dependents with disabilities (PCDs) * SESC: Access to facilities for you and your dependents **Financial Health** * Meal Voucher (VR): Flexible benefits card (Creditas Card) * Payroll-Deductible Loan (Creditas Benefícios) * Salary Advance (Creditas Benefícios) * Insurance Discounts (Minuto Seguros) * Access to exclusive financial education content in the Creditas app **Recognition and Development** * PPR: Profit-Sharing Program * Educational and Development Incentives  **Flexibility and Mobility** * Flexible Work Model * Free Bike Rack at the Office * Discounted Parking at the Office (subject to internal availability) Creditas is a financial services platform offering loans, insurance, and investments—secured against home, car, or salary. Operating since 2012, it is Latin America’s largest online credit platform and has received investments from international funds, raising over R$4 billion (US$879 million) in equity, with a current portfolio of R$5.6 billion. Through its proprietary technology, it offers products including auto- and real-estate-backed loans, private payroll-deductible loans, corporate benefits, and insurance. Creditas has exceeded 13 million credit applications, achieved a valuation of US$3.5 billion, and completed over 40 capital market issuances (FIDCs, CRIs, and FIIs). **WHY JOIN OUR TEAM?** From a 5m² office in 2012 to three complete ecosystems. We combine people’s homes, cars, or salaries to offer credit, insurance, or investments. As our history shows, we are always moving forward. *We combat complacency and the status quo because we believe there are always new paths to improve lives.* Here, “it’s not possible” is never an answer—we go there and make it happen. We dive into details, test, fail, learn, and are always guided by the desire to do better. Limitations are not barriers—they become starting points for creativity. We prioritize message clarity and thoughtful delivery; beating around the bush is not in our vocabulary. We know high performance isn’t about running faster—it’s about running together, going further, and valuing differences, open debate, and honest conversations. Above all, we create space for each person to write their own story. If you’re seeking a place to grow, experiment, and leave a legacy, Creditas could be your next step. **THE MORE DIVERSITY, THE MORE TRUTH** We firmly believe that differences make us stronger and more flexible when making the best decisions. It is more than intention—it is our commitment to you, to our team, and to society. Always.